201 · Question #294
A site needs a virtual server that will use an iRule to parse HTTPS traffic based on HTTP header values. Which two profile types must be associated with such a virtual server? (Choose two.)
The correct answer is A. TCP B. HTTP. To parse HTTPS traffic for HTTP header values using an iRule, the virtual server must be associated with both a TCP profile for basic layer 4 communication and an HTTP profile to enable layer 7 processing.
Question
A site needs a virtual server that will use an iRule to parse HTTPS traffic based on HTTP header values. Which two profile types must be associated with such a virtual server? (Choose two.)
Options
- ATCP
- BHTTP
- CHTTPS
- DServerSSL
How the community answered
(50 responses)- A80% (40)
- C14% (7)
- D6% (3)
Why each option
To parse HTTPS traffic for HTTP header values using an iRule, the virtual server must be associated with both a TCP profile for basic layer 4 communication and an HTTP profile to enable layer 7 processing.
A TCP profile is fundamental for any virtual server handling TCP-based traffic, including HTTPS. It manages the Layer 4 connection settings and must be assigned for basic network communication.
An HTTP profile is essential when an iRule needs to inspect or modify HTTP headers. For HTTPS traffic, after SSL decryption (typically handled by a Client SSL profile, not listed as an option), the traffic becomes readable HTTP, allowing the HTTP profile to enable Layer 7 processing capabilities for the iRule to access header information.
There isn't a standard profile type specifically named 'HTTPS'; while a Client SSL profile handles the SSL encryption/decryption for HTTPS, an HTTP profile is still required to parse the underlying HTTP headers.
A ServerSSL profile is used for re-encrypting traffic between the load balancer and backend servers, and it is not directly involved in parsing HTTP header values on the client-side decrypted traffic.
Concept tested: Virtual server profiles for HTTPS/HTTP iRule parsing
Source: https://techdocs.f5.com/en-us/bigip-16-1-0/big-ip-local-traffic-manager-concepts/configuring-http-profiles.html
Topics
Community Discussion
No community discussion yet for this question.